Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: Kw5JywR0bILjXIU9dMsf5DLi9ZL0VosM+tpasz2OUgM=
Subject key identifier: 19:03:B8:CB:AE:16:E0:44:3C:56:59:76:64:FF:9A:67:5C:0E:63:30
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019A7301A993CCC8B4E98D189F07136E5A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0E2C
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: rIGpANGepvxJ/Pa/dPiH3KTsmnx7+JueOQuzp96pwC4=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a9:93:cc:c8:b4:e9:8d:18:9f:07:13:6e:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=1903b8cbae16e0443c56597664ff9a675c0e6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:d8:82:6b:9e:f7:3f:7c:7e:e4:74:d6:a8:
e4:b5:11:9e:99:56:61:64:c5:fd:3d:13:c1:60:86:
3a:b4:3a:0a:fb:fa:76:0a:f7:09:18:f2:90:62:1d:
a3:ec:68:77:97:4a:e7:f8:af:37:24:25:b8:71:52:
67:a8:3a:a2:19:6a:e3:a3:c3:52:06:6f:df:57:37:
db:68:2e:ef:e0:fd:1a:6c:f7:6d:ec:30:42:51:36:
65:26:51:dc:f5:c8:42:a5:81:ab:a8:74:bf:8d:e8:
71:70:27:16:c2:bb:0c:35:6e:43:3f:1d:4c:62:b2:
75:cc:16:13:77:54:45:79:72:0a:bb:9b:c3:56:79:
98:94:16:87:f1:28:d1:9c:ee:50:24:f6:68:af:8b:
42:d1:f5:ab:a3:ce:c0:e0:d1:4e:53:7c:31:04:5c:
56:f4:8a:6e:97:1c:9d:50:3c:d3:96:c9:c4:3f:f8:
86:40:5a:ec:b8:4a:3f:78:10:59:27:55:db:a8:48:
79:9d:af:24:10:d6:30:38:5c:ff:af:c5:cb:fb:04:
79:05:cb:0b:5a:bf:95:86:41:2a:60:23:c8:7d:71:
00:ba:97:e8:9f:77:0e:e7:65:e6:3d:00:fa:67:7a:
83:de:77:3e:bc:a4:5a:5c:8c:26:3b:9a:cd:c0:b2:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:03:B8:CB:AE:16:E0:44:3C:56:59:76:64:FF:9A:67:5C:0E:63:30
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:14:2a:c2:a9:af:db:7d:45:f8:49:2b:3a:5e:dc:a6:46:cc:
0a:5c:24:a7:f4:b3:10:e5:fa:76:e2:ad:95:74:d9:01:30:ed:
43:8f:3a:b6:c0:58:1b:93:46:0a:04:12:1f:f7:a3:ab:b6:ef:
87:08:18:6e:f6:91:4c:5f:32:02:c4:23:0b:77:d5:27:b7:0b:
ec:ff:32:85:1c:3f:ab:45:83:e5:ab:c8:d7:1f:bf:12:98:4d:
9c:cb:38:3f:2d:bd:37:29:96:6b:d9:0c:94:a5:14:75:42:f5:
af:ea:57:b2:d4:49:c0:b5:54:46:7c:14:59:0f:48:6b:50:08:
d7:80:7a:46:7c:7b:fb:90:07:ac:c2:ea:a7:3d:16:0d:82:34:
10:42:3f:cf:b2:1c:98:60:65:ab:6c:81:41:ad:22:dc:a2:53:
2e:15:fc:c7:c0:21:c2:30:0a:06:80:53:5f:45:d0:40:2a:d7:
97:1b:82:35:24:e3:c8:76:aa:4d:e4:e8:51:b1:5c:cb:18:6c:
94:3c:ff:2c:76:c4:b9:47:37:eb:35:91:cc:16:28:84:af:2e:
23:4d:6c:01:d8:55:cd:94:06:5b:a4:3a:86:4e:00:0c:b4:4d:
f0:3c:27:bd:3f:8b:5c:e5:9d:3c:20:31:61:0a:1b:00:40:cb:
e8:bf:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:25 2025 by rpki-client